SMC Cybersecurity Analyst

Battelle Energy Alliance; Idaho Falls (ID); On-site; USD 79,000 - 195,000; Full time

Benefits offered by this job

Medical, Dental, Vision benefits

401(k) with company match

Paid time off

Tuition assistance / Education program

Relocation package

Job summary

Battelle Energy Alliance seeks a cyber-analyst to support mission-focused cyber defense hardware and software development at the Idaho National Laboratory. This role involves implementing RMF/SA&A, conducting authorized testing, and developing tools to mitigate vulnerabilities.

Collaboration with ISSM/ISSO and staff is essential, with multi-level posting depending on experience. The position requires US citizenship and a DOE L or Q clearance or equivalent, plus relevant certifications.

Qualifications

• Bachelor's degree in a related field technical, computer science, or computer engineering.
• Must be a US citizen and have a DOE L or Q clearance, or government equivalent.
• Current certification preferred; IAT/IAM Level I with CAP, CND, Cloud+, GSLC, Security+ CE, HCISPP, A+ CE, CCNA-Security, Network+ CE, SSCP are acceptable.

Responsibilities

• Identify cyber capabilities strategies for custom hardware and software development based on mission requirements.
• Conduct authorized penetration testing on enterprise network assets.
• Build, install, configure, and test dedicated cyber defense hardware; assist in assessing impact of cyber defense infrastructure.
• Design and develop new tools/technologies related to cybersecurity and troubleshoot prototype design issues.
• Develop data management capabilities (cloud-based, centralized key management) and validate data mining/warehousing programs.
• Review and validate data mining and warehousing programs and requirements.
• Implement RMF/SA&A requirements for cyber defense systems and maintain records.

Skills

Clearance: DOE L or Q

IAT/IAM Level I certifications

Education

Bachelor's degree in related field/technical

Job description

Essential Job Functions and Responsibilities

• Identify cyber capabilities strategies for custom hardware and software development based on mission requirements. Conduct and/or support authorized penetration testing on enterprise network assets. Evaluate network infrastructure vulnerabilities to enhance capabilities being developed. Build, install, configure, and test dedicated cyber defense hardware. Assist in assessing the impact of implementing and sustaining a dedicated cyber defense infrastructure.
• Conduct technology assessment and integration processes.
• Provide and support a prototype capability and/or evaluate its utility.
• Collaborate with others to identify and/or develop appropriate solutions technology. Design and develop new tools/technologies related to cybersecurity. Identify functional- and security-related features to find opportunities for new capability development to exploit or mitigate vulnerabilities. Troubleshoot prototype design and process issues throughout the product design, development, and pre-launch phases.
• Develop data management capabilities (e.g., cloud-based, centralized cryptographic key management) to include support to the mobile workforce. Review and validate data mining and data warehousing programs, processes, and requirements.
• Review and validate data mining and data warehousing programs, processes, and requirements.
• Research current technology to understand capabilities of required system or network.
• Identify cyber capabilities strategies for custom hardware and software development based on mission requirements.
• Collaborate with stakeholders to identify and/or develop appropriate solutions technology.
• Design and develop new tools/technologies related to cybersecurity.
• Evaluate network infrastructure vulnerabilities to enhance capabilities being developed.
• Troubleshoot prototype design and process issues throughout the product design, development, and pre-launch phases.
• Identify functional- and security-related features to find opportunities for new capability development to exploit or mitigate vulnerabilities.
• Identify and/or develop reverse engineering tools to enhance capabilities and detect vulnerabilities.
• Develop data management capabilities (e.g., cloud-based, centralized cryptographic key management) to include support to the mobile workforce.
• Research and evaluate available technologies and standards to meet customer requirements.
• Maintain knowledge of applicable cyber defense policies, regulations, and compliance documents specifically related to cyber defense auditing. Research current technology to understand capabilities of required system or network.
• Implement Risk Management Framework (RMF)/Security Assessment and Authorization (SA&A) requirements for dedicated cyber defense systems within the enterprise, and document and maintain records for them.
• This position interacts primarily with the ISSM/ISSOs and local staff.
• The Analyst utilizes knowledge and expertise to analyze all security aspects of an IS and will assist in the day-to-day security operations of the system.
• Job tasks include risk assessments for requested hardware, software, and both medical and non-medical Portable Electronic Devices.
• In coordination with the ISSM/ISSO, the Cyber Technical Analyst may be asked to assist in incident handling and security training and awareness as it relates to the IS.
• Other duties as assigned.

Education, Credentials, and Work Experience

Required

• Bachelor's degree in related field technical degree, computer science, computer engineering
• Relevant experience commensurate with level.
• Must be a US Citizen and have a DOE \"L\" or \"Q\" clearance, or have a government equivalent.
• Current certification is preferred. IAT/IAM Level I certified is having one or more of the following certifications: CAP, CND, Cloud+, GSLC, Security+ CE, HCISPP, A+ CE, CCNA-Security, Network+ CE, SSCP

Preferred

• CISSP certification.
• Security +, Splunk general
• Experience working with ICS/SCADA/PIT Systems.
• Direct technical experience working in Enhance Security Environments.

Physical Requirements

While performing the duties of this classification, the employee is frequently required to stand, walk, sit, stoop, kneel, bend, and work in an office and laboratory environment. The job requires hand/finger dexterity to keyboard or type, handle materials, manipulate tools, and reach with hands and arms. The job requires operation of job-related equipment and driving a vehicle. The employee must occasionally lift and/or move up to 30 pounds without assistance. Sufficient visual acuity and hearing capacity to perform the essential functions and interact with people is required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

Job Information

• The pay range for this position is: Level 2 ($79,344 - $162,732) / Level 3 ($95,256 - $195,288). At Idaho National Laboratory compensation decisions are determined using factors such as education, relevant experience, and other credentials.
• Multi-Level: This is a multi-level posting and you will be placed at the appropriate level dependent on depth and breadth of proven experience and skills.
• TDP: This is a testing designated position; you will be required to submit to a pre-employment drug screen and periodic drug testing throughout the term of your employment.
• Work is schedule is 4x10's out of the SMC.

Working Conditions

Incumbent of the position performs in a typical office setting with appropriate climate controls with laboratory field work subjected to variable weather. The noise level is generally moderate, with some exposure to high noises (>85 dB). Periodic travel required in normal course of job performance. Periodic safety training is necessary. Position may occasionally be required to work special shifts or weekends in support of programs, shifts more than 8 hours and work alone.

Security and Privacy Language

This position includes information security and privacy responsibilities as defined by NIST SP 800 53, OMB Circular A 130, and DOE Order 206.1A. Position must complete initial and annual role-specific training as required. The incumbent must sign and comply with all required access agreements prior to being granted access to organizational systems or data. Comply with all applicable information security and privacy policies and procedures by following established protocols, with an understanding that non-compliance may result in sanctions.

LevelDefiners

EX2 - Intermediate

• Knowledge: Developing professional expertise. Applies company policies and procedures to resolve a variety of issues. Frequent use and application of standards, principles, theories, concepts, and techniques.

EX3 - Career

• Knowledge: Complete understanding and wide application of principles, theories, and concepts in field of specialization. General knowledge of other related disciplines. Resolves a wide range of issues in creative ways. This level is fully qualified, career oriented.
• Problem Solving: Works on problems of diverse scope. Demonstrates good judgment in selecting methods and techniques for obtaining solutions. Solutions are imaginative, thorough, practical, and consistent with organizational objectives.
• Discretion and Latitude: Works under only general direction. Normally receives little instruction day-to-day. Independently determines and develops approach to solutions. Work is reviewed upon completion for adequacy in meeting objectives.
• Impacts: Contributes to completion of specific programs and projects. Failure to obtain results or erroneous decisions or recommendations would typically result in program delays.
• Liaison: Frequent internal organizational customer contacts. May have some outside contact or represent organization in providing solutions to difficult issues associated with specific projects or work.
• Education/Experience: Bachelor's and 5 years. Master's and 2 years. PhD and 2 years. years.

Benefits and Relocation

• Medical, Dental, Vision, and Flexible Spending Accounts
• 401(k) with a 4.2% employer contribution and up to 4.8% match (regular positions) or self-contribute access (postdoctoral positions)
• Paid time off (personal leave)
• Employee Education Program (tuition assistance for eligible positions)
• Comprehensive Relocation Package
• Benefit eligibility subject to multiple factors, including employment status and position classification.

Visa Policy

At this time, BEA will not sponsor any H1-B visas obtained outside of the United States of America (U.S.A.), including consular visas.

INL is a science-based, applied engineering national laboratory dedicated to supporting the U.S. Department of Energy's mission in nuclear energy research, science, and national defense. With more than 6,300 scientists, researchers, and support staff, the laboratory works with national and international governments, universities and industry partners to change the world's energy future and secure our nation's critical infrastructure.

INL Mission

Our mission is to discover, demonstrate and secure innovative nuclear energy solutions, other clean energy options and critical infrastructure.

INL Vision

Our vision is to change the world's energy future and secure our nation's critical infrastructure.

Selective Service Requirements

To be eligible for employment at INL males born after December 31, 1959 must have registered with the Selective Service System (SSS). For more information see www.sss.gov.

Equal Employment Opportunity

Idaho National Laboratory (INL) is an Equal Employment Opportunity (EEO) employer. It is the policy of INL to provide equal employment opportunities to all qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, protected veteran or disabled status, or genetic information.

Reasonable Accommodation

We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.